Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-47130
HistoryNov 14, 2023 - 9:15 p.m.

Remote code execution

2023-11-1421:15:00
PRIOn knowledge base
www.prio-n.com
5
remote code execution
yii
php
vulnerability
fix

7.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE) if the application calls unserialize() on arbitrary user input. An attacker may leverage this vulnerability to compromise the host system. A fix has been developed for the 1.1.29 release. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CPENameOperatorVersion
yiilt1.1.29

7.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

Related for PRION:CVE-2023-47130